Skip to content

deps(deps-dev): bump the dev-minor-and-patch group across 1 directory with 11 updates - #53

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/dev-minor-and-patch-ab68a89b3f
Open

deps(deps-dev): bump the dev-minor-and-patch group across 1 directory with 11 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/dev-minor-and-patch-ab68a89b3f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-minor-and-patch group with 11 updates in the / directory:

Package From To
@axe-core/playwright 4.13.0 4.14.0
@biomejs/biome 2.5.15 2.6.3
@playwright/test 1.63.0 1.64.1
@roxyapi/sdk 1.2.97 1.3.2
@types/bun 1.4.2 1.4.4
@types/node 26.6.4 26.6.5
lefthook 2.2.0 2.2.2
playwright-core 1.63.0 1.64.1
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
vue 3.5.43 3.5.44

Updates @axe-core/playwright from 4.13.0 to 4.14.0

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.14.0

What's Changed

New Contributors

Full Changelog: dequelabs/axe-core-npm@v4.13.0...v4.14.0

Changelog

Sourced from @​axe-core/playwright's changelog.

4.14.0 (2026-10-06)

Bug Fixes

Features

Commits

Updates @biomejs/biome from 2.5.15 to 2.6.3

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.6.3

2.6.3

Patch Changes

  • #12275 807e616 Thanks @​dyc3! - Added the new nursery rule noArraySortForMinMax, which reports sorting an array only to read its smallest or largest value. Use Math.min() or Math.max() instead.

    const minimum = array.toSorted((a, b) => a - b)[0];

  • #12432 cf61682 Thanks @​dyc3! - Added the nursery rule noBooleanSortComparator, which reports sort comparators that return a boolean instead of a number. For example, array.sort((a, b) => a > b) never puts the first item before the second, so the array isn't sorted correctly.

  • #12304 b4654c5 Thanks @​dyc3! - Added the new nursery rule noEagerArrayMethodsInLoops, which reports .map() and .filter() calls in the header of for...of loops. These calls build a new array that is only used by the loop.

    for (const name of users.map((user) => user.name)) {
  console.log(name);
}

  • #12121 66c3791 Thanks @​dyc3! - Added the nursery rule noNewRequire, which disallows calling require with new, such as new require("app-header").

  • #12316 34b520d Thanks @​dyc3! - Added the new nursery rule noObsoleteAttributes, which disallows obsolete attributes on HTML elements and suggests what to use instead.

    <table bgcolor="#ffffff" cellpadding="5"></table>

  • #12258 cce2385 Thanks @​dyc3! - Added the nursery rule noPathConcat, which disallows building file paths and URLs by joining strings to __dirname, __filename, import.meta.dirname, import.meta.filename, or import.meta.url.

    const fullPath = __dirname + "/foo.js"; // reported

  • #12287 e12ad78 Thanks @​dyc3! - Added the new nursery rule noPlaywrightNthMethods, which disallows selecting Playwright elements by position with first(), last(), and nth(). A test that relies on the position of an element can act on a different element when the page changes.

    await page.locator("button").first().click();

  • #12343 62ad123 Thanks @​vibbix! - Added the nursery rule noSelfNestedLayer, which disallows nesting a cascade layer inside a layer with the same name. Layer names inside an @layer block are relative to it, so the inner layer below creates the sublayer components.components instead of adding to components.

    @layer components {
  @layer components {
    .button {
      color: red;
    }

... (truncated)

Commits

Updates @playwright/test from 1.63.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

  • #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits
  • cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
  • 866cbb8 chore: mark v1.64.1 (#43354)
  • 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
  • 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
  • 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
  • 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
  • e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
  • f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
  • e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
  • d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
  • Additional commits viewable in compare view

Updates @roxyapi/sdk from 1.2.97 to 1.3.2

Release notes

Sourced from @​roxyapi/sdk's releases.

v1.3.2

Full Changelog: RoxyAPI/sdk-typescript@v1.3.1...v1.3.2

v1.3.1

What's Changed

Full Changelog: RoxyAPI/sdk-typescript@v1.3.0...v1.3.1

v1.3.0

Full Changelog: RoxyAPI/sdk-typescript@v1.2.102...v1.3.0

v1.2.102

Full Changelog: RoxyAPI/sdk-typescript@v1.2.101...v1.2.102

v1.2.101

Full Changelog: RoxyAPI/sdk-typescript@v1.2.100...v1.2.101

v1.2.100

Full Changelog: RoxyAPI/sdk-typescript@v1.2.99...v1.2.100

v1.2.99

Full Changelog: RoxyAPI/sdk-typescript@v1.2.98...v1.2.99

v1.2.98

Full Changelog: RoxyAPI/sdk-typescript@v1.2.97...v1.2.98

Commits
  • 45db192 release: v1.3.2
  • e73c691 release: v1.3.1
  • b4dbb3e chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 up...
  • a8262db release: v1.3.0
  • de460ce feat: retry 429 and 5xx by default with Retry-After, typed error codes, error...
  • 2cbc06d release: v1.2.102
  • 3afa8fc release: v1.2.101
  • 7efc70a docs: link the Rust SDK
  • 753e4ca docs: link domain references and bundled agent guides
  • f6bc8de release: v1.2.100
  • Additional commits viewable in compare view

Updates @types/bun from 1.4.2 to 1.4.4

Commits

Updates @types/node from 26.6.4 to 26.6.5

Commits

Updates lefthook from 2.2.0 to 2.2.2

Release notes

Sourced from lefthook's releases.

v2.2.2

Changelog

  • 4aeffd72a6e3ea846c2054cffd6294c943fd7fbb fix: cleanup only current stash hash (#1597)
  • db62412c82ddac71cf536e60e50edb2826624870 packaging: add support for android (#1591)
  • e3fa81b1f01881829ef95e37211da7923a4fd6df refactor(filter): simplify mimetype matching (#1596)

v2.2.1

Changelog

  • 6dd11f61f54595935746f9e0814c16844fc6d31b feat: support php composer (#1583)
  • c702ccf154bb180107ba5f790518c161d9ce111d fix: generate different patch names when in a worktree (#1582)
  • 486fdd317d29f815821ce2450d42e3a49b066eb0 refactor: cache paths in wrapper (#1570)
Changelog

Sourced from lefthook's changelog.

2.2.2

2.2.1

Commits
  • eb4e504 2.2.2: keep backups for worktree flows and release android NPM package
  • 4aeffd7 fix: cleanup only current stash hash (#1597)
  • e3fa81b refactor(filter): simplify mimetype matching (#1596)
  • db62412 packaging: add support for android (#1591)
  • 60c1ddd 2.2.1: support concurrent work in worktrees and release PHP package
  • 6dd11f6 feat: support php composer (#1583)
  • c702ccf fix: generate different patch names when in a worktree (#1582)
  • 486fdd3 refactor: cache paths in wrapper (#1570)
  • See full diff in compare view

Updates playwright-core from 1.63.0 to 1.64.1

Release notes

Sourced from playwright-core's releases.

v1.64.1

Bug Fixes

  • #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits
  • cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
  • 866cbb8 chore: mark v1.64.1 (#43354)
  • 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
  • 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
  • 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
  • 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
  • e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
  • f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
  • e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
  • d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates vue from 3.5.43 to 3.5.44

Release notes

Sourced from vue's releases.

v3.5.44

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.44 (2026-10-13)

Bug Fixes

  • compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #11164) (#15618) (f08059d)
  • compiler-core: parenthesise v-for key in v-memo cache guard (#15724) (d084b90), closes #15723
  • compiler-dom: correctly stringify 0 and false in v-html (#15571) (9f3b437)
  • compiler-dom: inject transition persisted for v-show in production (#15783) (89cb272)
  • compiler-sfc: error when defineModel prop options reference a destructured prop (#15604) (38012a5), closes #15602
  • custom-element: skip mounting an async custom element removed while its component loads (#15777) (0f8e7b4), closes #15775
  • hydration: observe children of a display: contents root in hydrateOnVisible (#15773) (7f688e8)
  • KeepAlive: unmount pruned current component when its vnode was cloned on mount (#15711) (92798ac), closes #15710
  • reactivity: avoid mutating native array iterators (#15703) (7f9d45d), closes #15643
  • reactivity: do not track deps in watcher callbacks run inside another effect (#15782) (db00fe9), closes #5009
  • reactivity: once watcher should stop when its callback throws (#15755) (ae4bd94)
  • reactivity: preserve shallow collection semantics (#15793) (b600466), closes #15792
  • runtime-core: detect new prop keys when comparing full props (#15634) (702fa61), closes #15632
  • runtime-core: keep async placeholder for block patching and pending component updates (#15554) (05ec25f), closes #15551
  • runtime-core: only flush jobs queued by the root render itself (#15757) (0bea14b), closes #6728
  • runtime-core: render nothing for an invalid v-for range in production (#15742) (ad19e7d)
  • runtime-dom: preserve v-show display for unchanged style strings (#15794) (c0a6d3f)
  • runtime-dom: treat playsinline as a boolean attribute (#15627) (a084e44)
  • server-renderer: propagate async setup errors (#15857) (6930374), closes #15716
  • ssr: honor falsy vnode content overrides (#15769) (c11c5c8)
  • suspense: mount resolved async component with its own namespace (#15640) (2a086a2), closes #15639
  • suspense: skip rendering async components unmounted while pending (4ab865a)
  • teleport: move targetStart and keep children before targetAnchor (#15818) (d3c6e02), closes #15817
  • transition-group: measure nested groups against their moving outer item (#15848) (1936c87), closes #5385 #1531
  • transition: handle comment-wrapped component roots (#15853) (ff35014), closes #6080 #5500
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 24, 2026
@dependabot
deps(deps-dev): bump the dev-minor-and-patch group across 1 directory…
a6b352d 
… with 11 updates

Bumps the dev-minor-and-patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.13.0` | `4.14.0` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.15` | `2.6.3` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.1` |
| [@roxyapi/sdk](https://github.com/RoxyAPI/sdk-typescript) | `1.2.97` | `1.3.2` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.2` | `1.4.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.5` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.2.0` | `2.2.2` |
| [playwright-core](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [vue](https://github.com/vuejs/core) | `3.5.43` | `3.5.44` |



Updates `@axe-core/playwright` from 4.13.0 to 4.14.0
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core-npm@v4.13.0...v4.14.0)

Updates `@biomejs/biome` from 2.5.15 to 2.6.3
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG_v1.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.6.3/packages/@biomejs/biome)

Updates `@playwright/test` from 1.63.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.1)

Updates `@roxyapi/sdk` from 1.2.97 to 1.3.2
- [Release notes](https://github.com/RoxyAPI/sdk-typescript/releases)
- [Commits](RoxyAPI/sdk-typescript@v1.2.97...v1.3.2)

Updates `@types/bun` from 1.4.2 to 1.4.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `@types/node` from 26.6.4 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `lefthook` from 2.2.0 to 2.2.2
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.2.0...v2.2.2)

Updates `playwright-core` from 1.63.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.1)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `vue` from 3.5.43 to 3.5.44
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.43...v3.5.44)

---
updated-dependencies:
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch
- dependency-name: "@roxyapi/sdk"
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch
- dependency-name: "@types/bun"
  dependency-version: 1.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: lefthook
  dependency-version: 2.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: playwright-core
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
- dependency-name: vue
  dependency-version: 3.5.44
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/dev-minor-and-patch-ab68a89b3f branch from 41f15f6 to a6b352d Compare October 27, 2026 19:08

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants